my home page on IE is jacked

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • chowda
    Confirmed User
    • Jun 2003
    • 9527

    #1

    my home page on IE is jacked

    dont know how to get ride of it

    always sends me to http://easy-search.biz/

    change the internet options and it goes back. what to do?
    Someone finds you...
    2007

    PS: Nationalnet is the best host I've ever had. And i tried alot of them.
  • fr8
    Confirmed User
    • Mar 2003
    • 5074

    #2
    I had to deal with this on a couple of machines at work. One NT machine and another 2000 machine. Its called the CWSHijack. Ill dig up the remove info for it.
    joesmut (a) gmail Dot com
    Full Stack Developer

    Comment

    • sid275
      So Fucking Banned
      • May 2004
      • 396

      #3
      wow ! how do the do that ?

      Comment

      • VIPimp
        Marina WILL have my babies!
        • May 2003
        • 9234

        #4
        SpyBot should get rid of it.

        Comment

        • fr8
          Confirmed User
          • Mar 2003
          • 5074

          #5
          Damn wasnt fast enough on the edit feature.

          here is the site.
          http://www.spywareinfo.com/articles/cws/

          and a direct link to the shredder.
          http://www.spywareinfo.com/~merijn/files/cwshredder.zip
          joesmut (a) gmail Dot com
          Full Stack Developer

          Comment

          • chowda
            Confirmed User
            • Jun 2003
            • 9527

            #6
            thanks, i got rid of it

            this is what i get for surfing tgps.
            Someone finds you...
            2007

            PS: Nationalnet is the best host I've ever had. And i tried alot of them.

            Comment

            • SleazeQueen
              Confirmed User
              • Jun 2002
              • 634

              #7
              I got hit with the same thing this weekend. Cleaned it up with that shredder program, but one thing remains. They changed my wallpaper to an ad for some Evidence Eliminator program. It's a html file. I found it, deleted it and the images it called. Now I just have a white/gray flashing screen over my usual wallpaper picture.

              Can't figure out where it's at so I can change it!
              Bush can no more fire Rove than Charlie McCarthy could fire Edgar Bergen.

              Comment

              • marttali
                Confirmed User
                • May 2003
                • 265

                #8
                A friendly suggestion - use firefox/ bird instead or better yet - opera. No more spyware, malware, viruses etc. Plus those browsers are faster than ie and they are highly customizable. What else could a webmaster want ?

                Comment

                • pornstar2pac
                  Omaha Hi/Lo
                  • Nov 2003
                  • 17380

                  #9
                  Bill Gates is up to all this. he wants us crying and begging to MS to save us fromthis world of spyware...
                  Trump haters gonna hate. that's all they can do

                  Comment

                  • cluck
                    Confirmed User
                    • Dec 2002
                    • 5248

                    #10
                    Originally posted by SleazeQueen
                    I got hit with the same thing this weekend. Cleaned it up with that shredder program, but one thing remains. They changed my wallpaper to an ad for some Evidence Eliminator program. It's a html file. I found it, deleted it and the images it called. Now I just have a white/gray flashing screen over my usual wallpaper picture.

                    Can't figure out where it's at so I can change it!
                    You have to disable the active desktop, but it has to be done via the registry. That's the spyware porngraph uses. Annoying as shit, I know.

                    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

                    Add a DWORD value called NoActiveDesktop and set the data to 1.

                    Restart, you're set.
                    icq 279990726
                    www.mcdonalds.com <- great money making opportunity

                    Comment

                    • Peacemaker
                      Confirmed User
                      • Feb 2002
                      • 897

                      #11
                      internet explorer is such a open hole.. while i was checking gal submissions my IE was hijacked.. i installed alot of "anti spyware etc" software but they could remove it. the hijacker programm did not only set my default homepage to a local (on my hd) file (.dll) but also overwrite the IE .exe stored at my hd. i have seen alot of hijackers but this one was the most agressive.. no chance to remove it, as there was no programm out there able to do it.
                      SEO since 2002 - Google Index Record: 32 minutes. - Selling SEO services and tools

                      Comment

                      • evl4fun
                        Confirmed User
                        • Jul 2003
                        • 372

                        #12
                        use system restore set it back a day

                        If you spend all day worrying about what happened yesterday.....then tommorow will suck too.

                        Comment

                        • Peacemaker
                          Confirmed User
                          • Feb 2002
                          • 897

                          #13
                          didnt work..
                          because that hijacker patched some .dll and .exe that windows loads up while starting.
                          SEO since 2002 - Google Index Record: 32 minutes. - Selling SEO services and tools

                          Comment

                          • ListYourPorn
                            Confirmed User
                            • Jan 2004
                            • 791

                            #14
                            This has been a pest to me all week. I in the end formated both my machines I got them up and was almost ready to pick up from where I left off and bang I got it again - I realy pissed


                            Sex Add your sites Click Here

                            Comment

                            • evl4fun
                              Confirmed User
                              • Jul 2003
                              • 372

                              #15
                              Originally posted by Peacemaker
                              didnt work..
                              because that hijacker patched some .dll and .exe that windows loads up while starting.
                              start in safe mode...go into your host file and reset it

                              If you spend all day worrying about what happened yesterday.....then tommorow will suck too.

                              Comment

                              • Scootermuze
                                Confirmed User
                                • Dec 2001
                                • 4513

                                #16
                                Spy Sweeper Is a decent spyware removal program that records your home page.. and if it gets changed, S.S. will let you know and change it back.

                                Comment

                                • Hank_MrSkin
                                  Confirmed User
                                  • Sep 2002
                                  • 3987

                                  #17
                                  Originally posted by Scootermuze
                                  Spy Sweeper Is a decent spyware removal program that records your home page.. and if it gets changed, S.S. will let you know and change it back.

                                  Who are the ISEARCH motherfuckers anyway...I could kill those bastards
                                  Icq = 459565429 AIM = butlerhankb http://stripperpins.com
                                  Twitter = @stripperpins Facebook = Stripperpins.com
                                  [email protected]

                                  Comment

                                  • Ian
                                    Confirmed User
                                    • Oct 2002
                                    • 1259

                                    #18
                                    I had to go to the Hun to get rid of a particular group of annoying assholes:

                                    http://www.thehun.net/gazette/

                                    http://www.spywareinfo.com/~merijn/downloads.html

                                    Cool-search.net was hard to get rid of.

                                    Comment

                                    • ATL_Ryan
                                      Confirmed User
                                      • Sep 2002
                                      • 1519

                                      #19
                                      Why don't you just click the contact link at the bottom of the page. It has a remove link.

                                      http://easy-search.biz/contact.html


                                      Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

                                      Pretty simple huh?

                                      Comment

                                      • nojob
                                        The Original NoJob
                                        • Feb 2004
                                        • 3682

                                        #20
                                        the restore is you best option then installing a good spy ware removal program

                                        Comment

                                        • chowda
                                          Confirmed User
                                          • Jun 2003
                                          • 9527

                                          #21
                                          fuck this thing keeps writing to my registry and adding in their fucking url
                                          Someone finds you...
                                          2007

                                          PS: Nationalnet is the best host I've ever had. And i tried alot of them.

                                          Comment

                                          • ATL_Ryan
                                            Confirmed User
                                            • Sep 2002
                                            • 1519

                                            #22
                                            Originally posted by chowda
                                            fuck this thing keeps writing to my registry and adding in their fucking url

                                            Is everyone missing this?

                                            Why don't you just click the contact link at the bottom of the page. It has a remove link.

                                            http://easy-search.biz/contact.html


                                            Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

                                            Pretty simple huh?

                                            Comment

                                            • chowda
                                              Confirmed User
                                              • Jun 2003
                                              • 9527

                                              #23
                                              Originally posted by CJ_Ryan
                                              Is everyone missing this?

                                              Why don't you just click the contact link at the bottom of the page. It has a remove link.

                                              http://easy-search.biz/contact.html


                                              Most all of these types of pages have a remove link. Always check at the bottom of page for a contact or remove link.

                                              Pretty simple huh?
                                              yeah i just did it.
                                              just that they fucked up my computer.. its kinda hard to trust it.
                                              but it worked.
                                              Someone finds you...
                                              2007

                                              PS: Nationalnet is the best host I've ever had. And i tried alot of them.

                                              Comment

                                              • ATL_Ryan
                                                Confirmed User
                                                • Sep 2002
                                                • 1519

                                                #24
                                                Originally posted by chowda
                                                yeah i just did it.
                                                just that they fucked up my computer.. its kinda hard to trust it.
                                                but it worked.

                                                This same thing has happened to me 4 or 5 times. After trying everything for days I finally started looking around on the page and found a remove link. I've never run into a browser hi-jack search page that didn't have a remove link. They are hard to find but they are there. No one ever looks for these things. They always start with the spyware/adware stuff and reinstalling browsers. I'm sure people have reformatted their comps because of this when the solution is provided and right in front of them.

                                                Comment

                                                • MiSsBeHeaDReSs
                                                  Confirmed User
                                                  • May 2004
                                                  • 534

                                                  #25
                                                  Here's a tip, don't use IE, use Mozilla!
                                                  Why geeks like computers: unzip, strip, touch, finger, grep, mount, fsck, ram, more, yes,fsck,fsck,fsck,umount, sleep.

                                                  Comment

                                                  • ATL_Ryan
                                                    Confirmed User
                                                    • Sep 2002
                                                    • 1519

                                                    #26
                                                    Originally posted by ListYourPorn
                                                    This has been a pest to me all week. I in the end formated both my machines I got them up and was almost ready to pick up from where I left off and bang I got it again - I realy pissed

                                                    It takes 30 seconds to fix.

                                                    Comment

                                                    • SleazeQueen
                                                      Confirmed User
                                                      • Jun 2002
                                                      • 634

                                                      #27
                                                      Originally posted by cluck
                                                      Add a DWORD value called NoActiveDesktop and set the data to 1.
                                                      That fixed it. Thanks!
                                                      Bush can no more fire Rove than Charlie McCarthy could fire Edgar Bergen.

                                                      Comment

                                                      Working...